Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/1czAgsbuZZojynSdOcrAcOPssHg.roa
File: 1czAgsbuZZojynSdOcrAcOPssHg.roa (raw, json)
Hash identifier: GI1m49uqHV3sz8TA594sR3FULR3lHJmQJBvUTtdM4cY=
Subject key identifier: D5:CC:C0:82:C6:EE:65:9A:23:CA:74:9D:39:CA:C0:70:E3:EC:B0:78
Certificate issuer: /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial: 0191328778D1D070398FCF145E319F47053B
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/1czAgsbuZZojynSdOcrAcOPssHg.roa
Signing time: Thu 08 Aug 2024 15:07:04 +0000
ROA not before: Thu 08 Aug 2024 15:07:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210218
IP address blocks: 2.58.93.0/24 maxlen: 24
2.58.94.0/24 maxlen: 24
2.58.136.0/23 maxlen: 23
2.58.138.0/23 maxlen: 23
2.59.248.0/22 maxlen: 22
31.13.194.0/24 maxlen: 24
31.13.249.0/24 maxlen: 24
31.13.250.0/23 maxlen: 23
31.13.252.0/22 maxlen: 22
45.8.74.0/23 maxlen: 23
45.12.248.0/22 maxlen: 22
45.139.100.0/22 maxlen: 22
45.143.100.0/22 maxlen: 22
45.149.232.0/24 maxlen: 24
77.75.56.0/23 maxlen: 23
77.75.58.0/23 maxlen: 23
78.40.160.0/22 maxlen: 22
78.40.164.0/22 maxlen: 22
80.249.124.0/22 maxlen: 22
87.120.46.0/23 maxlen: 23
87.120.63.0/24 maxlen: 24
87.120.85.0/24 maxlen: 24
87.120.86.0/24 maxlen: 24
87.120.96.0/23 maxlen: 23
87.120.111.0/24 maxlen: 24
87.120.177.0/24 maxlen: 24
87.120.218.0/24 maxlen: 24
87.120.224.0/24 maxlen: 24
87.120.226.0/24 maxlen: 24
87.120.232.0/22 maxlen: 22
87.121.19.0/24 maxlen: 24
87.121.36.0/23 maxlen: 23
87.121.59.0/24 maxlen: 24
87.121.66.0/23 maxlen: 23
87.121.68.0/24 maxlen: 24
87.121.116.0/24 maxlen: 24
87.121.148.0/23 maxlen: 23
91.92.3.0/24 maxlen: 24
91.92.24.0/24 maxlen: 24
91.92.25.0/24 maxlen: 24
91.197.196.0/22 maxlen: 22
91.243.184.0/22 maxlen: 22
92.249.51.0/24 maxlen: 24
93.123.68.0/22 maxlen: 22
93.123.86.0/23 maxlen: 23
93.123.108.0/24 maxlen: 24
94.154.174.0/23 maxlen: 23
94.156.16.0/22 maxlen: 22
94.156.32.0/24 maxlen: 24
94.156.48.0/21 maxlen: 21
94.156.95.0/24 maxlen: 24
94.156.108.0/22 maxlen: 22
94.156.168.0/23 maxlen: 23
94.156.182.0/23 maxlen: 23
94.156.184.0/24 maxlen: 24
94.156.187.0/24 maxlen: 24
94.156.192.0/23 maxlen: 23
94.156.234.0/23 maxlen: 23
94.156.240.0/22 maxlen: 22
94.156.246.0/23 maxlen: 23
94.240.56.0/22 maxlen: 22
95.214.124.0/23 maxlen: 23
95.214.126.0/23 maxlen: 23
109.206.238.0/24 maxlen: 24
141.98.0.0/24 maxlen: 24
164.40.184.0/24 maxlen: 24
164.40.186.0/23 maxlen: 23
171.22.29.0/24 maxlen: 24
176.125.253.0/24 maxlen: 24
178.175.184.0/21 maxlen: 21
178.175.184.0/22 maxlen: 22
185.171.148.0/22 maxlen: 22
185.221.66.0/24 maxlen: 24
185.225.72.0/24 maxlen: 24
185.252.178.0/24 maxlen: 24
193.19.200.0/22 maxlen: 22
193.36.232.0/22 maxlen: 22
193.37.43.0/24 maxlen: 24
193.37.46.0/24 maxlen: 24
193.46.172.0/22 maxlen: 22
193.56.16.0/22 maxlen: 22
193.56.248.0/22 maxlen: 22
193.58.184.0/22 maxlen: 22
193.207.0.0/24 maxlen: 24
193.207.1.0/24 maxlen: 24
193.207.2.0/24 maxlen: 24
193.207.9.0/24 maxlen: 24
193.207.10.0/24 maxlen: 24
193.207.11.0/24 maxlen: 24
193.207.12.0/24 maxlen: 24
193.207.13.0/24 maxlen: 24
193.207.16.0/21 maxlen: 21
194.48.249.0/24 maxlen: 24
194.76.204.0/22 maxlen: 22
194.147.8.0/22 maxlen: 22
194.180.50.0/24 maxlen: 24
195.178.120.0/24 maxlen: 24
195.225.120.0/22 maxlen: 22
212.22.128.0/19 maxlen: 19
212.24.0.0/19 maxlen: 19
212.73.135.0/24 maxlen: 24
2a09:e6c0::/29 maxlen: 29
2a09:e6c0::/48 maxlen: 48
2a09:e6c7:f800::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Sep 2024 12:20:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:87:78:d1:d0:70:39:8f:cf:14:5e:31:9f:47:05:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a6a589ee848a8052238191b98035e775122725
Validity
Not Before: Aug 8 15:07:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5ccc082c6ee659a23ca749d39cac070e3ecb078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:3b:58:18:53:3a:99:5a:f1:69:00:39:bd:
40:09:90:ac:cf:f1:5b:8e:1d:61:1b:d3:41:11:a0:
fa:33:9e:2c:5b:6f:11:52:3a:ae:a7:6a:f9:1f:3e:
1f:28:53:e0:28:2a:ae:3f:2d:7d:a1:ab:d2:23:d3:
4a:07:b1:3f:6e:10:b4:19:94:09:94:c5:58:0e:8a:
3d:20:c3:da:85:01:d2:66:c9:3f:a1:fe:62:12:f9:
81:2c:16:e2:7e:d8:58:e0:07:67:2a:31:9c:b6:99:
c1:65:f8:c9:09:86:5c:79:37:99:4b:3c:33:c4:70:
29:a1:e3:bd:2e:af:9e:a2:80:6e:33:0c:ca:5d:eb:
08:08:96:e6:88:aa:f9:c9:22:db:b6:da:01:f9:56:
45:a9:54:bb:d2:b8:5a:85:d3:f7:35:ae:09:be:d6:
79:ce:ae:43:3a:13:67:5b:7c:7a:b6:40:b2:a4:ac:
04:5e:f5:40:f3:86:fc:a0:71:3b:e3:ec:83:99:06:
14:d9:6a:a9:1a:e5:9b:45:a0:e8:d2:33:1b:72:b0:
26:17:98:c3:77:8a:f7:33:c9:89:12:0a:04:b7:9b:
60:e5:59:a1:5f:78:19:78:d5:03:08:8a:6b:e1:b1:
8d:8a:d9:cb:eb:28:bc:ee:8b:7c:a3:aa:3b:b2:fc:
dc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CC:C0:82:C6:EE:65:9A:23:CA:74:9D:39:CA:C0:70:E3:EC:B0:78
X509v3 Authority Key Identifier:
keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/1czAgsbuZZojynSdOcrAcOPssHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.93.0-2.58.94.255
2.58.136.0/22
2.59.248.0/22
31.13.194.0/24
31.13.249.0-31.13.255.255
45.8.74.0/23
45.12.248.0/22
45.139.100.0/22
45.143.100.0/22
45.149.232.0/24
77.75.56.0/22
78.40.160.0/21
80.249.124.0/22
87.120.46.0/23
87.120.63.0/24
87.120.85.0-87.120.86.255
87.120.96.0/23
87.120.111.0/24
87.120.177.0/24
87.120.218.0/24
87.120.224.0/24
87.120.226.0/24
87.120.232.0/22
87.121.19.0/24
87.121.36.0/23
87.121.59.0/24
87.121.66.0-87.121.68.255
87.121.116.0/24
87.121.148.0/23
91.92.3.0/24
91.92.24.0/23
91.197.196.0/22
91.243.184.0/22
92.249.51.0/24
93.123.68.0/22
93.123.86.0/23
93.123.108.0/24
94.154.174.0/23
94.156.16.0/22
94.156.32.0/24
94.156.48.0/21
94.156.95.0/24
94.156.108.0/22
94.156.168.0/23
94.156.182.0-94.156.184.255
94.156.187.0/24
94.156.192.0/23
94.156.234.0/23
94.156.240.0/22
94.156.246.0/23
94.240.56.0/22
95.214.124.0/22
109.206.238.0/24
141.98.0.0/24
164.40.184.0/24
164.40.186.0/23
171.22.29.0/24
176.125.253.0/24
178.175.184.0/21
185.171.148.0/22
185.221.66.0/24
185.225.72.0/24
185.252.178.0/24
193.19.200.0/22
193.36.232.0/22
193.37.43.0/24
193.37.46.0/24
193.46.172.0/22
193.56.16.0/22
193.56.248.0/22
193.58.184.0/22
193.207.0.0-193.207.2.255
193.207.9.0-193.207.13.255
193.207.16.0/21
194.48.249.0/24
194.76.204.0/22
194.147.8.0/22
194.180.50.0/24
195.178.120.0/24
195.225.120.0/22
212.22.128.0/19
212.24.0.0/19
212.73.135.0/24
IPv6:
2a09:e6c0::/29
Signature Algorithm: sha256WithRSAEncryption
63:91:3b:cb:5c:a0:28:1b:f5:2d:00:9b:16:ea:5f:83:ba:6f:
ac:d2:73:39:1a:d5:6e:dd:24:b1:a8:f4:08:39:e5:50:a6:73:
de:76:40:e9:68:41:e9:a6:c2:5d:9b:3a:a0:81:af:b4:b1:c7:
16:bb:23:49:f7:f9:af:5d:cd:18:47:ac:de:8f:59:ca:eb:37:
80:c0:01:7a:71:10:df:95:ff:6b:bd:24:75:cd:11:6a:af:61:
92:36:13:ff:cb:e1:fc:1c:61:6d:c5:93:a6:68:2f:a4:25:63:
04:a3:2c:55:d9:67:f1:12:32:bf:53:3b:ff:c6:3d:22:66:3e:
77:8d:f1:b4:3d:57:d5:c2:d3:88:06:d5:88:84:84:35:35:31:
58:de:aa:93:4d:39:5b:2c:78:12:de:39:f1:ba:64:4a:18:65:
e1:8e:a3:a3:29:15:a3:05:64:50:24:5b:10:68:1e:5e:e4:39:
92:74:70:a5:ca:0f:0c:5c:ef:d6:7d:d6:2a:bf:b8:03:de:50:
6e:f4:6b:64:77:5b:ea:da:76:fa:84:11:d3:aa:ca:c5:ce:4e:
0b:71:40:b0:f4:96:8b:c9:e0:30:84:8d:9c:99:db:a3:c6:35:
22:5c:01:a5:a2:46:a2:51:2d:34:d0:8e:d2:23:0a:ed:9c:2d:
94:07:a5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 14:03:38 2024 by rpki-client on console-ams.rpki-client.org